Hid env vars and capped referrers results to 400